kwtSMS: OTP & SMS Notifications

Yes. You need an active kwtSMS account with API access. Sign up at kwtsms.com. API credentials (username and password) are entered in the Gateway settings page.

In Test Mode (enabled in Gateway Settings), messages are queued on the kwtSMS server but never delivered to the recipient's phone. Credits are still deducted. To recover them, log in to your kwtSMS account dashboard and delete the queued messages from the outbox. The OTP code is visible under kwtSMS > Logs > Debug Log so you can complete authentication flows during development without a real phone. In Live Mode, the SMS is delivered to the recipient's phone and credits are deducted. Always develop with Test Mode on, then disable it before going live.

Yes. WooCommerce is fully optional. All login, password reset, and contact form features work on any WordPress site.

Add this line to your wp-config.php: define( 'KWTSMS_OTP_DISABLED', true ); This bypasses all OTP checks and restores the standard WordPress login. Remove the line once you have regained access.

Check the Sending Queue at kwtsms.com. If your message is stuck there, it was accepted by the API but not dispatched. Common causes are emoji in the message, hidden characters from copy-pasting (from Word, PDF, or rich editors), or spam filter triggers. Delete the stuck message from the queue to recover your credits. Also verify that Test Mode is off in Gateway Settings: in test mode, messages are queued but never delivered to the handset.

A Sender ID is the name that appears as the sender on the recipient's phone (for example, MY-APP instead of a random number). KWT-SMS is a shared test sender. It causes delivery delays and is blocked on Virgin Kuwait. Register a private Sender ID through your kwtSMS account. For OTP and authentication messages, you need a Transactional Sender ID, which bypasses DND (Do Not Disturb) filtering on Zain and Ooredoo. Promotional Sender IDs are filtered, meaning OTP messages can silently fail while credits are still deducted.

The plugin requires your API username and API password, not your account mobile number or your login password. Log in to kwtsms.com, go to Account > API settings, and verify your API credentials. Credentials are case-sensitive. Make sure there are no extra spaces when copying and pasting.

International sending is disabled by default on kwtSMS accounts. Log in to your kwtSMS account and activate coverage for the countries you need. Visit the kwtSMS dashboard to view and manage your active country coverage. Note that enabling international coverage increases exposure to automated abuse, so rate limiting is strongly recommended before enabling it.